Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: CtpALP7QSGQs+ggpjxRxDA2ivD+zxtAVKBfoVW31ck4=
Subject key identifier: 5E:54:F4:D2:77:6C:A4:A9:46:AF:AE:6C:C5:D1:73:5B:75:B6:3C:81
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 0197B77C532206839B2E45C6A617E6BF0084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: 43
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: QeD1H/ubeVm/cp8FCVX/6vPtTKK76pma6UaSNq0yjHY=)
2: Hgg4Efyy8pmuFPjo5o1HWqeNRGU.roa (hash: QWuXRLwV44VOALcmRW0lf+RWKmWiNgLwuGDWKDY/d3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:53:22:06:83:9b:2e:45:c6:a6:17:e6:bf:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=5e54f4d2776ca4a946afae6cc5d1735b75b63c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:da:db:8c:ef:fe:71:13:c1:8a:7d:dc:c5:
85:9d:47:29:8b:2e:cc:0d:9c:c8:5d:5b:3c:eb:5a:
bb:28:76:d1:3d:eb:bc:08:e7:70:46:17:0f:0f:ba:
26:36:e4:56:49:bb:c3:03:a6:a4:ea:bc:4a:c7:60:
fc:12:ce:a8:88:34:a1:d1:60:d4:b1:9b:db:7a:22:
09:59:00:c0:c5:0b:70:29:25:ca:50:ba:48:6b:a3:
a8:a3:91:98:84:fa:52:fa:82:63:10:1d:e4:ae:ed:
09:2d:4e:fe:91:2a:1f:ad:47:20:96:77:73:40:1e:
dd:71:e0:c4:5f:b9:fc:6e:bb:5f:da:63:25:33:9e:
d3:88:9a:21:6f:98:6d:58:d8:ca:2c:7a:7f:80:dd:
4c:84:87:f4:c9:9f:bf:09:e6:89:eb:9e:27:e3:de:
cc:18:3a:50:97:17:ee:c7:aa:5c:a1:23:ea:cd:0b:
fb:dc:86:f0:14:58:16:60:37:00:6a:b6:f1:d2:94:
c2:87:1a:88:6d:10:a1:a4:0f:5c:0b:38:6d:0f:73:
62:27:59:90:77:b7:2f:89:16:24:c3:04:9e:96:bc:
e4:79:f2:f4:5e:33:33:ef:1b:eb:1b:aa:ab:c6:6d:
7e:48:b0:ff:b7:d2:99:8e:91:87:25:3a:aa:3a:1c:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:54:F4:D2:77:6C:A4:A9:46:AF:AE:6C:C5:D1:73:5B:75:B6:3C:81
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b8:04:28:e0:ee:3f:40:27:a0:8a:9a:78:a5:04:88:f0:d0:
23:d2:78:7f:4b:09:e9:30:ef:7d:9e:5f:3c:9c:d6:fa:d2:3f:
5b:48:ca:1a:0d:b2:40:c0:57:69:1a:04:1d:08:a4:2f:1b:49:
e7:69:a8:89:14:e1:b2:b0:64:00:db:fe:68:81:c0:70:14:9d:
b5:2a:f1:e8:e4:51:e9:fd:43:90:0c:f1:73:f1:07:4c:68:52:
ea:28:e4:a2:09:01:8e:25:91:0c:e1:a9:c0:b6:45:fb:77:0b:
d3:99:73:8d:d8:3e:13:10:93:97:63:6a:b8:88:e9:16:b9:ed:
bb:63:f7:1e:cc:fb:03:0a:fd:87:a1:da:b0:3b:5b:0e:b1:03:
29:74:fa:77:83:9d:d4:46:c4:96:59:22:ad:5a:08:15:38:90:
1c:92:db:60:4f:eb:d4:f1:e4:54:d1:e7:b5:b8:fc:64:03:de:
bf:3d:e8:1e:31:c6:9a:21:af:f6:01:ab:4c:11:4e:29:80:98:
05:71:63:47:1b:c9:9f:99:69:48:03:f7:46:e6:d9:f6:98:62:
45:26:55:56:93:dd:1e:33:2d:41:e0:c8:b9:50:f0:5d:b8:13:
11:79:be:c2:0a:76:48:51:10:79:f5:14:fb:87:ff:17:ff:52:
33:e4:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:27 2025 by rpki-client